Title: Can't find malicious code
Last modified: August 22, 2016

---

# Can't find malicious code

 *  Resolved [Context Canada](https://wordpress.org/support/users/context-canada/)
 * (@context-canada)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/cant-find-malicious-code/)
 * Can you assist with this? According to your scan there are no modified files.
   However, there is an outside link coded in the header. I can’t find the file 
   causing it. Also, when you are logged in the link disappears. Let me know if 
   you can help and I will send you the the website address.
    Thanks, Terry
 * [https://wordpress.org/plugins/sucuri-scanner/](https://wordpress.org/plugins/sucuri-scanner/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [yorman](https://wordpress.org/support/users/yorman/)
 * (@yorman)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/cant-find-malicious-code/#post-5677543)
 * The plugin has _(at the moment)_ six different file system scanners, one of those
   is used to power the functionality of the _“Core Integrity Checks”_, this scanner
   only reads the content of the main WordPress directories [1] found in all the
   official archives. So there is a high probability that the modified file(s) is/
   are inside the content directory since the plugin is not reporting any core file
   as modified.
 * People usually hide their malicious code in themes, fake plugins, and tables 
   of the database associated with the website, for WordPress-based sites they usually
   pick the options table because it is very easy to inject content there and make
   it appear in the frontend with the native WordPress functions.
 * Somehow it is good that you are experiencing this only when you are not logged
   in because it will be easier to spot the origin of the malware with a web scanner.
   Try to use the _“Malware Scan”_ tool available in the plugin and see if it detects
   the signature of the malicious code, if not you can send the link of your site
   to this email [2] and do not for get to reference this ticket so my co-workers
   can forward the message to me.
 * [1] wp-admin, wp-includes, and the root directory.
    [2] Sucuri Research [labs@sucuri.net](https://wordpress.org/support/topic/cant-find-malicious-code/labs@sucuri.net?output_format=md)
 *  Thread Starter [Context Canada](https://wordpress.org/support/users/context-canada/)
 * (@context-canada)
 * [11 years, 6 months ago](https://wordpress.org/support/topic/cant-find-malicious-code/#post-5677690)
 * Thank you for all of the help that you provided offline. That file has been found
   thanks to your assistance and removed.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Can't find malicious code’ is closed to new replies.

 * ![](https://ps.w.org/sucuri-scanner/assets/icon-256x256.png?rev=2875755)
 * [Sucuri Security - Auditing, Malware Scanner and Security Hardening](https://wordpress.org/plugins/sucuri-scanner/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/sucuri-scanner/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/sucuri-scanner/)
 * [Active Topics](https://wordpress.org/support/plugin/sucuri-scanner/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/sucuri-scanner/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/sucuri-scanner/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [Context Canada](https://wordpress.org/support/users/context-canada/)
 * Last activity: [11 years, 6 months ago](https://wordpress.org/support/topic/cant-find-malicious-code/#post-5677690)
 * Status: resolved